Static | ZeroBOX

PE Compile Time

2074-07-22 19:01:35

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000394bc 0x00039600 7.94005571324
.rsrc 0x0003c000 0x000046cc 0x00004800 4.31828226773
.reloc 0x00042000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0003c100 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x00040138 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0004015c 0x00000370 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000404dc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
button1_Click_1
button1
ClassLibrary1
IMG_3615_763_8
<Module>
System.IO
mscorlib
Form1_Load
add_Load
Synchronized
method
defaultInstance
set_AutoScaleMode
EndInvoke
BeginInvoke
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
Console
Simple
set_Name
WriteLine
square
get_Culture
set_Culture
resourceCulture
ButtonBase
ApplicationSettingsBase
Dispose
MulticastDelegate
EditorBrowsableState
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
add_AssemblyResolve
CurrentDomain_AssemblyResolve
IMG_3615_763_8.exe
set_Size
set_ClientSize
System.Runtime.Versioning
disposing
System.Drawing
MyMath
get_Mhpyqeoj
AsyncCallback
callback
add_Click
PerformClick
System.ComponentModel
Tmwkqjo.ClassLibrary1.dll
ContainerControl
get_Usawoikguvl
GetManifestResourceStream
MemoryStream
Program
System
resourceMan
AppDomain
get_CurrentDomain
Application
set_Location
System.Configuration
System.Globalization
System.Reflection
ControlCollection
Button
CopyTo
CultureInfo
Tmwkqjo
sender
get_ResourceManager
ResolveEventHandler
System.CodeDom.Compiler
RepositoryDescriptorConsumer
StopListener
IContainer
set_UseVisualStyleBackColor
.cctor
Sbeyoaesbs
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Tmwkqjo.Form1.resources
Tmwkqjo.Properties.Resources.resources
DebuggingModes
Tmwkqjo.Properties
EnableVisualStyles
Settings
ResolveEventArgs
get_Controls
System.Windows.Forms
set_AutoScaleDimensions
ClassLibrary1.Consumers
components
GetObject
object
get_Default
SetCompatibleTextRenderingDefault
IAsyncResult
result
InitializeComponent
Qrbmirt
SuspendLayout
ResumeLayout
set_Text
set_TabIndex
ToArray
get_Assembly
GetExecutingAssembly
WrapNonExceptionThrows
Email Sorter
Copyright
ASTGD 2018
$a08c540a-cdef-4bfc-8717-2cbb4fa22754
1.3.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
a%j!d[
/06gw,
9+bIm:
9{bIk:%
wo!?jW
wWfp{z
$@!4&OS
|6\s!o
}9a,V(k
}KV!Q\
bE5ZM
h/22uV#4
uF.5,"[
'HjoB,
Y~)Kdc_Q
m8#~B2R
.Xhn<L
4 lA,Q
@:ZRdK
Ho!"s#b
-X_#4Y
bu/EFz7[7UI
.}HBx1B
NDB-REG
tmU2:>
[kXy'3
6# ~gq
4?Y'S#
z<+qb%5Q
w2;0H
LLw#%+
:i@YG|
ygwtu
LfP!Ug
a[bhPi$
OOy8CA] /
~=3SM\
f ccz3i@z]@
_-64;u5
Ker&;fe
<c6W<?,W
{?X_oz-
vn(o8Sjp
(;Tne:\
6\=!*a
s:yl?
QU-1JW
NtNXpwm
6z}|s)5
 `gM/
;$+mnD
Gb7!DK
No{Vo^
WZ6iv]
dA'dA_
fcs_jR
s!IunL
XaQpiE
yL]SEW
yHw=k@~
qxNv1j
!TujT#
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
-N9_X.
@UkjJ3R>
7WmX]T
QTr9sjZ~
t#jTp};
'Zsf^%Wb
;[Dn5f
Sf|ZsT
03)|qp
M\/|z9
og/UT4
T~[Qgs
&!%Uv8
*A!fO^
gE9s&
+JZVrRy
Y<"]_g:
IIn[}2j
Bs6q{j0
)1#_Ww
|0Qzgf
FQ5Jn1|
!nb4c$"n
^.a;qMtf
.[b(\]W
$A0oB
HWTLWTBWTtWT
5bIvt1
hY+?Gg,K
"S0jpw
nep)yR]i
fnaI-.
bh~14?
,6(hr6"
5tESb4k2@
_/@PU}
+lfV2w*
cE7pQYXZZ
kZO9j(
*!N:3:
7-A7Go
9L7g%m
T6d>*=V+p
xFX'+lA..J
l{a,P6
}r_6p7
_}0eQ3
FgqpA$?
OE3eNG
I|##-8
QsC>?Y
Zl%KC
ebV'E2L
R?GI&c
/*mS{,L
@&<W:,`
QM`G9)
!pxut$t
&aT|Nh@
2TUp^6
rRyvH.X
Z5GtV>
-Q-M(P
`19,82
:>?O{Kum=
t]F"_gE-
;g7 [^
V}~**
vi+*s7
P4!J/v
FU\4P,]
CRwiGv
^rc>r.
@:Wi2_
nZuTx/
I?sruX
\e9v1!
Am_g]|
<$+'zg
$2LH@[
j|6]2bn
Hc*bV_#
+Ui~5r
2soeA"
wJUq79
.P5jt:
T+>_=:
:dj#1b
H*@Mw07
PnUr#q
d>?QCL
lR$mj`
7F}\(y
Mcb%Yb[
!aS]:
o{C?.T
g.l`4s
q7-0q~R
-c"hz
`K#T}f
`=%kv8*
+:jz+~
jIzG3(4O
DrDg&nb@
ZtfOt&
M9DW2z|
eQ(L8o
,N,7 C-d
@p/A_
TIYO(F
eW$w&V+B
T_fh *
ZF]+t3
EQ%bZsQ
V5P8d<d)IU04
b-wcICO-
!!3*mo
?g`9Lh
7#9.\F
?)jv&0e
XQ%=^5
4'%\QxA
tRsEO}
>Y,=;Oh
Cu/}Jy
U1*4/&
z#W"6M
3v8lo\
~K1{w{
}8;4&u
9X#Nx
:Y/I}'
n#HkPi
%:~m0A
U'*V]f
4c62Zr
J.[io>
4x^*&aT
afB\%Q7.c;-D
#s{'6;
E1yDCL
~Xj~^s
nJz;|N
u69_?i1Y
),"u'B
1"lfHWO}
<p5)y#
pL!7hB
CepjcHV
He@&~7`
H0"}IC
zT&hl!
mZNmA~
_Lo.`Y]n5~S
z>}Rm=
,\g'n/
3|<!|
:)r7l%
mK}:>L
LJxPoK
DoB|7)
a9a<b0
s4^Txo
5JH(Rq
hU)";j|
WfHP;1q2].acB
9k8X9Ih
6qs4T(
(&KC8w
H".[\X+
VSGNc&/
M*'7}@K
g?%>@s
>g'2pFvD
A)pqDY !d
T`;@L1
bc%"1X
\xm|{K
V(5|px
D0qcK8[
>@_$%;
;LG;)rH
b{jV`k,
m!M^j`
b_B-|3k
+3f.NGK~p
[yt5Q}
x(c0P;l
qVw;^]
:\4tJ`
+~:.zB
_;~"S[
&TLq1La
l{[N<X
T9lfsc
k,+LM"
k4mV5d
yrgs-Sp
25O5;+
ksXpt$
tf1nMg$0
&hhR=h\
1i"0!V
Q$dm1Ttc
fGCa&a
*X5T,P
kUL~RG
e:8mN{hp
J_Y `G
V3}1sH
XSvs"iS
c.GBF/-RO
[ac3LGi
?FV6gA
_!eg[5
VVw%A6
F=Tj[Tz
w-(K1kg
1;?BMb
&&Q?be+
1MLMS5?
+O 2\
>}dJTD
Z@>cgw
*^.9nb
-/@[ob
W.<mtr
IZ`D D
a*H_|!
<B3TC;5+
B*[%FQ$
D-&}8N`
'*o\4Y
WPM]Cx
}2IO+W[n
4%~[c~
$XL$XO
.s'M9rwI
=P;_mK
w3zinFN
@LFJ@E
9I\5hi
sR~0x1
=ArVNn
D?Y?mCB
r.Cfd-R
48>^8w
N/6vL$
P;ABEf
Z,c?9J
sv^z$1
pMiK<l
HOf|j0
k:.1<
t_@?a{
wd6q{U
#9D,]6
fO8/xp
-Y1}Yk
$|IA$|
SK:VS;
nduOY*
BW:hj"
ejQ};.d
ZT8m8Oqft
a\jrSv
d MBGl^
Sm(m14
+KzAIx
+Ij4RH0L
ceNL<Xj
B^AGk9
5|SS/SI
-($ ]>
;lHZM]
gmM=5l
[gT{h6
1[-w/E
*XGLN\$
$K lVL
+[wy{+
no1@yk
F47{@e%
;;pM?O
M-#geQ
;TH|Bo
0YmY?9
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
b l!MHa
7ca .W
cf K/.
cf K/.
c {FQX
}(a |x+=a
g#ZIX
c P=5Ca
Xe {KO
cf K/.
f Yu4Ba
cf K/.
%P-e ;
D3wj
sXYYe
g#ZIX
g#ZIX
v4.0.30319
#Strings
ClassLibrary1
ClassLibrary1.dll
<Module>
RepositoryDescriptorConsumer
ClassLibrary1.Consumers
Object
System
mscorlib
<Module>{f2cd1422-f32c-4ac4-808c-fe068cd336cf}
listener
_Broadcaster
m_Visitor
String
ExcludePolicy
CountListener
PopListener
PushListener
InstantiateListener
EnableListener
RestartListener
StopListener
connection
CalcListener
AppDomain
MemoryStream
System.IO
Assembly
System.Reflection
GZipStream
System.IO.Compression
MethodInfo
Concat
Thread
System.Threading
InvokeMember
BindingFlags
Binder
Stream
CompressionMode
Boolean
GetMethods
GetTypes
ToArray
MethodBase
Invoke
MemberInfo
get_Name
ToString
op_Equality
get_FullName
CreateInstance
get_Length
IDisposable
Dispose
get_CurrentDomain
Environment
GetPolicy
AddPolicy
CheckPolicy
LoginPolicy
GetType
m_ab7eac5714bb464db19109ccef62dfeb
m_13b3fab00aeb4817872a8413faf782f4
m_8671769d67c44aeea848058fc51d04a9
m_e1a3425f31104071ab2b05380153b265
m_0c74c9f1a3114466aa092d5aeb7a2bd7
m_5d85c33187874fc58f994814cbde53f8
m_9bceaf18898f4abb9469bf04239ad36d
m_ad18df87c02c4e0e933e509f50a9929e
m_f3c6681dfd1c41ffa263e88170e64cb3
m_4774612a372f48c2a06961745ec1429f
m_f4e79495ea1f4e6e87c71ae6e17cc74a
m_1d0d4802dbc54080b6cee0b5a9aaac2b
m_b463438ce6644ce888fbdf1de18357f4
m_7447a2f27d2e4246b1175f5f83f5fd94
m_05070091b1e242b6b2823b34336fbf22
m_7d693d6c82714b0e8e62600aa16000f1
m_039e6d664f8c46c1921b62465cb3370e
m_b9f3076b86764bdb9cd8e1439d423868
m_e153c89fa33c427e8b6e181de7705fab
m_0f5fbc4cb2e248b3a57251ab01081c9c
m_183e51c991424f048d6a126dfe5f32a7
m_47849af62228447a97fd397415df91e3
m_387735b7824641b1910dee94e2929bc4
m_b12258f522b64b3c92b675657b93e654
m_414186aca32944be9528161dc566b341
m_75b715adc1e2470c981a940c8baf3268
m_c49ce5496d4b4d02856223d9fb34e99b
m_edd8f84846a143ec99f050bf217108a5
m_80e875b7cb764888a1ee090719510231
m_73c6088cb807495ea8b2e0ae49215958
m_7a24d89caf0447f39484f8a29c5f424a
m_07c248420fc944a7ba750d5eb1f729dc
m_87c25bfed4d0468b99b482f83156fade
m_321da0687d9e46f9a2721b7509a79cfc
m_16f21e29911344ce98774e95b469423d
m_400582a5eb6e42c987d7a17caaacc7bd
m_69c8aaf000454e4091ab131b08ba2cbb
m_004a8736129e456dba79e06f418d96c7
m_b6e59f25060d4b9ab0dedb8640dd12fd
m_c282b315070a42e695d100ae1d1d3f69
m_a20d9ab474944224a2a975fa44dcf437
m_2685963e5a184af39e84c03d2d8eaf7f
m_f66f088598404b51b9ad598eaf074ceb
m_ec3a2c9da1f243348a32c0538aa48f2c
m_e9587fd733d4495fad9f2cf715d63efa
m_4ff9dc5e5db24d9b87f7e911fb9e4240
m_cc8f3d80dd0f4b69a4171eee5117e91c
m_e3b0c563036d40b8aa9adfae013096b5
m_c2648f041c9448c9ab0c79357d74a612
m_8e4e5b5ec969447aba899f6a8bd4b798
m_3bc6af1dd834452cb0fa863294eeb9e1
m_713b1130bb0542e3bf91ce382a4b962a
m_071cce42ffa84448a1be6452f4f3cba8
m_cc5f8cf6e9644654b7eb9866cb60c99f
m_9a21ccfde0ca4d9195b9b80fdba9e013
m_dc7577bcaa2f4f4f8a9f5f9f6252e86d
m_a12a8ed9dab54ce0bad4686f9007c34a
m_c8c026a9bc8843ad806bcd400bcc6561
m_c767b505852d45d182f53807033baff8
m_9e6e9555b403455993fafe1f22d286ab
m_7b1be1a79ebc47d6817dfd0d36fdfa48
m_a644a286454f4e188ff6d1a72f6869c9
m_850dd47d214a4fe182bb251bbade3db9
m_d22050b5a3f941dc86513d2f25e215ba
m_dd581b1190664657a295fa2eb1b7d681
m_5bca2343966e4f15904393294bc39c1e
m_efdcf6d41c59460d830b9c2b91facde7
m_dd25f38d837a4045844771c596707915
m_47437b38be67435ca20b7c2adbcc7513
m_6cb9f3701f034388bca5bad7da298fb9
m_c3caed1a152a43848e525fb4bbd36497
m_d084af86cfa740b8b42746484dd81d38
m_5555737a2adb45c0852ac242c7c0d014
m_5ef8039dd64c45b8aaa1679f0c922991
m_d74517e3ec8c4cf180d5080f5747854d
m_b02b9642ee8a4571bce48d353327019b
m_95f3fc16f393404191513f6819e32360
m_1b087bf9c93143edbf69c13aa173485c
m_c19c5cce736c4840b3b31814d5688f2d
m_560d6ee9f5734d37b2843bbe6e2b461c
m_3d2a4c670dbc48658553fd3d77596517
m_63301607a12b4480b0edddd9444d78c1
m_6e272c4bf6ae47d3b05006610abdef5d
m_6830b500fecf4e1892c046307bbe3b4e
m_96f2bc2abd3d46f98bd1e62f7108068d
m_1c9c167f4597447dba245fefabcbcc16
m_393f5dd529c44c6d99e880446e18fa19
m_bfff91ed9d6a49419ed6fed23db08c85
m_0da75a947e874834b89d42b61d66d645
m_bbfb00ce28ac434982a728968de760ca
m_ebac8ae7bad84272beaa336281d8bf7c
m_dc0528f7210b424d950b98505bde2b41
m_5f2e41e4132341498e399d486f8e9c3e
m_924ac58641964747b2565072aba78fe8
m_bd7e0553a6da4ba88fcc2c1b6a89d256
m_5ab8c0db406d46a4becd8c4e20441209
m_b3e7107cf2a649dc8fcdae31e97b91cc
m_05509df3ebc64439bf7c5bc7ffe7a7f6
m_20c0881cbf6948439a6ac8ba724501cc
m_fb8169b401054acc87869e610ba6257c
m_33bd622c6bfc400f8fb129159c4adaa9
m_14b655fbcae34e38bee20dd360e96987
m_1daf17a983a041c1a739ebbb44d37dc3
m_9514b40ad96a4ad2ae3848a5540dd7f7
m_4886172bce274021b6ac0ebf9de745df
m_44fd6aaae38146608ea6aa732e8e9da5
m_7d02f4b91950438aa05e086185d7da22
m_293587384311469e946a610744b00027
m_0ee5fef59fb84a52a2b7a30daa32356a
m_6afd18b6f6b64d80a5e02ce2997a72c7
m_ebe984bfdbe04f3fb1cfc3df913d396a
m_aca4720d442e4740a4e53ac8ddd23d46
m_643567c416604d20861a648b7a9c1250
m_c53b3149edb543d4802d528e5f7a57ac
RestartPolicy
.cctor
v2a67b3fc84c149138380e347be9c2bb9
VisitPolicy
NewPolicy
PostPolicy
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
WrapNonExceptionThrows
ClassLibrary
Copyright
2021
$7c158b45-9dc4-4066-8cda-58e028d1a857
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
_CorDllMain
mscoree.dll
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
4 + 10 = {0}
LogoutProcess
button1
Tmwkqjo.ClassLibrary1.dll
Tmwkqjo.Properties.Resources
Mhpyqeoj
Usawoikguvl
Mhpyqeoj
Usawoikguvl
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
ClassLibrary
FileVersion
1.0.0.0
InternalName
ClassLibrary1.dll
LegalCopyright
Copyright
2021
LegalTrademarks
OriginalFilename
ClassLibrary1.dll
ProductName
ClassLibrary
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Email Sorter
CompanyName
FileDescription
Email Sorter
FileVersion
1.3.0.0
InternalName
IMG_3615_763_8.exe
LegalCopyright
Copyright
ASTGD 2018
LegalTrademarks
OriginalFilename
IMG_3615_763_8.exe
ProductName
Email Sorter
ProductVersion
1.3.0.0
Assembly Version
1.3.0.0
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Cylance Unsafe
Zillya Clean
AegisLab Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.f2e21e
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of Win32/Injector.EPKO
APEX Malicious
Avast Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye Clean
Sophos Generic ML PUA (PUA)
Ikarus Trojan.MSIL.Inject
GData MSIL.Trojan.BSE.XNY6ZA
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira Clean
Antiy-AVL Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilCO.34692.pm0@amLPQQf
ALYac Clean
MAX Clean
VBA32 Clean
Malwarebytes Malware.AI.3778805661
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
eGambit Unsafe.AI_Score_99%
Fortinet Clean
Webroot Clean
Paloalto Clean
CrowdStrike Clean
Qihoo-360 Clean
No IRMA results available.